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Abstract 

Generalizing earlier work characterizing the quantum query complexity of computing a function 
of an unknown classical "black box" function drawn from some set of such black box functions, we 
investigate a more general quantum query model in which the goal is to compute functions of N x N 
"black box" unitary matrices drawn from a set of such matrices, a problem with applications to 
determining properties of quantum physical systems. We characterize the existence of an algorithm 
for such a query problem, with given query and error, as equivalent to the feasibility of a certain 
set of semidefinite programming constraints, or equivalently the infeasibility of a dual of these 
constraints, which we construct. Relaxing the primal constraints to correspond to mere pairwise 
near-orthogonality of the final states of a quantum computer, conditional on the various black- 
box inputs, rather than bounded-error distinguishability, we obtain a relaxed primal program the 
feasibility of whose dual still implies the nonexistence of a quantum algorithm. We use this to 
obtain a generalization, to our not-necessarily-commutative setting, of the "spectral adversary 
method" for quantum query lower bounds. 

PACS numbers: 03.67.-a, 03.67.Mn, 03.65.Ud, 05.30.-d 
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I. INTRODUCTION 



Quantum computers can solve certain problems faster than any known classical algo- 
rithm: the best-known examples are probably Shor's algorithm jl|, Q] for factoring integers 
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ynomial in the number of digits needed to represent them, and Grover's "search" 
3|, which, for example, allows quadratic speedup (from time of order TV to time of 
order \/N) of "brute-force search" for solutions to certain problems. The structure of these 
algorithms may be understood as based on "black-box" or "query" algorithms, in which we 
have as input a function implemented as a "black-box" subroutine, and we would like to 
determine a property of the black-box function with few calls ( "queries") to the subroutine. 
For factoring, the corresponding query algorithm is one in which, given a strictly periodic 
function as a black-box, we must find its period[l3]; for Grover's, given a 0/1 valued function 
taking, say, n-bit strings as inputs, we must determine if the function is identically zero or 
not. In abstract models of such black-box computation, called "query models" by computer 
scientists, an instance of a problem is specified by a set of possible black-box functions, and 
a property of those functions (whose value, in some finite set, may depend on the function), 
which we want to compute with bounded error (say, less than some constant e). The query 
complexity of an instance is the minimal number of queries needed to compute the property 
on that instance. The cost of computation done between queries is ignored in this abstract 
model. Typically we are concerned with a problem having arbitrarily large instances, and 
with how the query complexity of instances scales with their size-for instance, polynomially 
in the case of the "order-finding" query problem ^] on which Shor's algorithm is based, 
exponentially (but with half the classical exponent) in some versions of Grover's algorithm. 
In concrete algorithms such as Shor's factoring algorithm, or applications of Grover's algo- 
rithm to speeding up the search for solutions to instances of hard problems, the black box is 
replaced by an explicit program or circuit, usually a polynomial time program or polynomial 
size circuit, but the algorithm treats it as a black-box, i.e. does not look at details of the pro- 
gram or circuit, but only provides inputs to it and processes outputs from it. Also, in such 
concrete algorithms based on black-box ones explicit algorithms must be provided for the 
computation that takes place betwen the queries, and this, too, is typically polynomial-time 
in input size. If the abstract black-box complexity of a problem is polynomial, and concrete 
algorithms can be founded implementing each black box polynomially, and each inter-box 
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computation polynomially, then the abstract black box algorithm can be converted into a 
concrete polynomial-time algorithm, as in the case of factoring. Lower bounds on black-box 
algorithms can imply lower bounds on the performance of concrete algorithms having such 
a substituted-black-box structure, but for these to be interesting, the possibility of known, 
easy ways of exploiting the structure of circuits in a concrete algorithm must be built in, for 
example by applying a lower bound technique to a set of queries including the inverse of the 
basic black-box transformations, if the circuit model allows (as does the standard quantum 
one) the easy construction of a polynomial-size circuit for the inverse of a given polynomial- 
size circuit. Likewise, the ability to apply a black box or not conditional on the value of 
some qubit should also be included for similar reasons (given a quantum circuit, it is easy 
to concoct another circuit of essentially the same size that applies the first conditionally). 
(This, and the point about the inverse, was suggested to me by Daniel Gottesman Q at a 
talk I gave on an earlier version of this paper.) 

In Grover's algorithm, and many other abstract query algorithms such as the "Abelian 
hidden subgroup" problem that can be abstracted from Shor's algorithm and its predecessors 
such as Simon's algorithm 6], the black-boxes can be viewed as a set of commuting unitaries 
implementing "black-box functions" quantum-coherently. For example, they may compute a 
Boolean function / : {1, .., S} i— > {0, 1} of an input in {1, S} supplied in an S'-dimensional 
quantum register in its "standard" or "computational" orthonormal basis € {l,...,^}, 
and then write the resulting value onto an output qubit by adding it modulo 2 to the value 
of the output qubit in its standard basis {|0), |1)}; thus Of\i)\b) = \i)\f(i) ®b), for standard 
orthonormal bases of the two registers. For all the various possible such /, these "black- 
box" unitaries Of commute with each other, being diagonal in the basis that is the product 
of the standard bases. Obviously, one can do something similar for a larger finite set of 
outputs. Other models for quantum queries to classical functions, such as "phase queries," 
Of\i) i — ► (— equivalent up to a constant factor in the number of queries to the above 
straightforward quantum-coherent reversible computation of / when conditioning and the 
adjoint unitaries are included, are sometimes used, and there too all unitaries commute. 

In this paper, however, we analyze the case where queries involve a not-necessarily com- 
muting set of black-box unitaries. This latter setting is relevant, for example, to algorithms 
intended to extract information about quantum physical systems, an area of intensive re- 
search. Although not all unitaries (e.g. on n qubits, a 2 n -dimensional quantum system) can 
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be represented with polynomially many (in e.g. n) quantum gates, the ones that can are still 
of great interest. Many interesting questions about unitaries are still superpolynomially hard 
(relative to P 7^ NP) when confined to such polynomially representable unitaries. Thus, just 
as in the case of "quantum-coherent classical" queries, there is the possibility that abstract 
query algorithms for determining properties of noncommuting quantum black-boxes may 
lead to efficient and important concrete algorithms. 

Note, for example, that unitary evolutions induced by "local" hamiltonians on a lattice 
can be well approximated by polynomially many gates [7|. To extract certain information 
(e.g. about the spectrum) directly from the unitaries themselves involves manipulating 
2 n x 2 n matrices. One could imagine using the short classical description of the small 
quantum circuit directly (i.e. in some way other than running the circuit, thereby going 
beyond the black-box model) to do the computation more quickly, even classically, but it is 
not clear that this will be possible and for certain problems, it is not possible in polynomial 
time unless P = NP. However, there is the tantalizing possibility that least some information 
may be gotten more efficiently than classically by treating the unitary as a "black box" in 
a quantum computation (legitimate in terms of actual computation time when it has a 
poly-size quantum circuit). Important candidate examples where the quantum algorithm is 
better than known classical ones include {J, [h]], flf |. 

An important part of the study of quantum computation has been the investigation 
of lower bounds on the quantum query complexity of various problems. Although lower 
bounds in query settings do not logically imply lower bounds of the same functional form 
for concrete versions of corresponding problems, because of the possibility of "looking inside 
the black box" in a concrete situation, many computer scientists view them as a good 



guide in many situations: for example, the lower bounds on Grover's problem |12j matching 
the a/TV performance of Grover's algorithm are widely taken as fairly reasonable grounds 
to expect that quantum computers will not perform NP-hard computations in polynomial 
time, although they are only part of the story as a crucial part of the question is whether 
one believes quantum circuits encoding classical computations may have some structure 
that quantum algorithms can take advantage of better than it is generally thought classical 
computations can take advantage of classical circuit structure. 

In this paper, we provide a new formulation of the quantum query computation model 
with unitary black-box queries. It closely parallels the formulation for quantum-coherent 
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classical queries in 13j; all of the results in this paper have counterparts there and many 
of the ideas used in their proofs are related (indeed some parts are essentially identical) 
as well. As for quantum-coherent classical queries, our formulation takes the form of a 
theorem showing that a query algorithm for a problem instance exists if, and only if, a 
feasible solution to a certain set of semidefinite programming (SDP) constraints exists. This 
formulation contains, we think, the mathematical "essence" of quantum query complexity: 
much information concerning details of the unitaries implementing the between-query evo- 
lution in the standard picture, but irrelevant to the algorithm's query complexity, is not 
present in our picture. The formulation allows us to derive space bounds for unitary query 
computations. It allows us to exploit the "revolution" of the last 15 years or so in conic, 
especially semidefinite, programming, leading to polynomial-time methods for solving these 
optimization problems, to obtain a polynomial algorithm for estimating the quantum query 
complexity of a problem instance. 



II. MATHEMATICAL AND NOTATION AL PRELIMINARIES 

In this next section, we will formalize two equivalent notions of quantum query algorithm, 
and use them to formally define quantum query complexity. First, however, we record some 
mathematical conventions, terminology, and facts we will use. We often define a set S 
as the set of all things referred to by some expression Expr(X) containing a variable, as 
the variable ranges over another set, say T; we write this as: S := {Expr(x)} x£ T- The 
pure states of quantum systems, which are vectors in a complex inner product space of 
finite dimension d (we'll sometimes refer to it as a Hilbert space), will often be identified, 
usually without comment, with the isomorphic linear space of d x 1 matrices ("column 
vectors") over C, where the matrix is identified with the matrix elements of the state in 
some special basis. This special basis will the basis used to define operators on that space. 
Thus the space of operators on a quantum space will also usually be implicitly identified 
with a space of matrices, and states, both pure and mixed, on tensor products of quantum 
spaces will also be identified with spaces of matrices, whose entries are interpreted as the 
operators' matrix elements in the product of the standard bases for the individual spaces. 
Dirac notation will sometimes, but not exclusively, be used for vectors, or for projection 
operators, when especially when these represent, or directly correspond to, quantum states 
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of a query computer. We write M(d) for the space of d x d complex Hermitian matrices. 

The notion of "purification" of a mixed state p Hl (operator on a Hilbert space Hi) will also 
be used. This is a "pure" state \^ HlH2 } e Hi®H 2 such that tr H2 \^ HlH2 )(^ HlH2 \ = p Hl . We 
write di for the dimension of Hi, i G {1,2}. It is a well known fact that any finite-dimensional 
positive semidefinite matrix p on Hi has a "purification" in Hi ® H 2 as long as d 2 is at least 
rank(p). A sometimes useful way of thinking about states on tensor products of spaces, 
and the partial trace, is in a block matrix picture: identifying the space of operators on 
Hi <S> H 2 with the space of di x d\ block matrices with blocks in M(d 2 ) (viewed as arrays of 
matrix elements of the operator in the tensor product of standard bases for Hi, H 2 ). Then 
the partial trace over Hi of a matrix M is the sum of its diagonal blocks, whereas its partial 
trace over H 2 is the matrix of traces of its blocks. Parenthetical superscripts, like G^ X,Y \ 
indicate blocks of a block matrix. 

Superscripts are used (as we have just done) to denote which system an operator acts on, 
or a vector belongs to (in the latter case they occur within the ket or bra notation), subscripts 
to index vectors or matrices belonging to an indexed set of such objects. "Functional" 
notation like p(t) also indicates dependence on an index, but its use will be confined 

to quantum states and variables directly related to quantum states, such as the variables 
in the "primal" semidefinite programs we define below, that correspond closely to quantum 
algorithms. The reason for this is that occasionally we want a quantum state to depend 
on which black box has been supplied to a quantum algorithm as "input", and we reserve 
subscripts, as in \^x), to indicate this dependence on an an input X. We often write, for 
example, the X,Y matrix element of G as G[X, Y]; when an object is a quantum state, 
Dirac notation such as (X\G\Y) may be used as well. Because of the other uses to which 
we put subscripts, they are never used to indicate matrix elements. 

We use the notation | jS* | to indicate the cardinality of a set 5". When a Hilbert space is 
defined in terms of a distinguished orthonormal basis indexed by a set S (i.e., defined as the 
free complex inner product space over the set S), we may also use S to refer to the Hilbert 
space itself. Quite generally, we also write \S\ for the dimension of a Hilbert space S; there 
it does not, of course, refer to its cardinality. 
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III. FORMULATION OF QUANTUM QUERY ALGORITHMS AND COMPLEX- 
ITY 

We will use both a "black-box" and an equivalent "explicit input" model of quantum 
query complexity. In the black box model, a problem is given by specifying a set S of 
"black-box" unitary operators, a finite set T, and a function g : S — > T. The problem is to 
design an algorithm that, for all X G S, computes g(X), exactly or with zero or bounded 
error. We will mostly be interested in the bounded error case. The computer state will be 
written as a superposition of basis vectors \w)\i) G Q <E> W, where the first, n-dimensional, 
register Q is the "query register" , on which the unitary U G S acts, and the second register, 
W, is workspace. 

For what follows, we will let S be a finite set of unitaries in order to avoid having 
"matrices" indexed by infinite sets, or operators on infinite-dimensional spaces, though we 
expect generalizations to infinite sets of unitaries to be straightforward. 

Definition 1 A finitary query problem instance in the unitary- queries model (problem for 

short) is an integer n, a finite set S of n x n unitaries, a finite set T , and a function 
g:S^T. 

Definition 2 A q-query quantum algorithm ( QQA ) for a problem P = (n, S, T, g) is an 

integer \W\ (the "workspace dimension"), a sequence Uq, Ui, U q of n\W\ x n\W\ unitary 
matrices (the "inter-query unitaries"), and an indexed set of \T\ projectors {P z } z eT, that 
are n\W\ x n\W\ matrices. 

On a black-box unitary input X, such an algorithm runs as follows. We consider a 
computer whose Hilbert space is Q <g> W, the tensor product of an n- dimensional "query 
register" Q which has a distinguished orthonormal basis indexed by 0, ...,n — 1, and a (tri- 
dimensional "workspace" W with a distinguished basis 0, \ W\ — 1. We define an action 
of the unitary matrices Ui on this space by interpreting them as the matrices of unitary 
operators Q ® W in an ordered basis \i)\j) (with the fast running index corresponding to 
Q). We start with the computer state |0)|0), and alternate the unitaries Ui with the fixed 
query unitary X (which acts only on the register Q, i.e. we apply X (g) J to the computer). 
Thus at time t (immediately after the t-th query) the state of the computer when X is input 
is: \4>x(q)} = U t (X <g) I)U t -x(X ® I) ■ ■ ■ Ui(X <g> I)U o \0)\0). After q queries, the projectors 
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{Pz}z are measured, obtaining an outcome z G T, interpreted as the value of g(X), with 
probability 

p{z) = {$x{q)\P,\*x{q)) ■ (1) 
The special case of computing a Boolean function / : {0, l} m i— >■ {0, 1} using phase queries 
corresponds to the commuting set of unitaries S = {f/ z }xe{o,i} m ; defined by (i\U x \j) = 

Definition 3 We say an algorithm A = (\W\, {Uo, ...U q _i}, {P z } z! zt) solves the problem 
P := (n,S,T,g) with bounded errors (or for short, e-computes g), iff with \4>x{q)) defined 
as above, for all z G T and X G S such that g{X) = z, 

($x{q)\P z \$x(q))>e. (2) 

We sometimes call such a QQA a "(g, e)-QQA for g" . 

Definition 4 The quantum query complexity QQC e (g) of a function g is the least integer 
q such that there exists a q,e-QQA for g. 

At times it will be useful to consider an "extended computer" whose Hilbert space is 
I®Q®W ', with Q, W as before and 7 an \S\ -dimensional "input" register with a distinguished 
orthonormal basis {\X)}xes- With such a construction, we can give an extended "explicit 
input" version of quantum query algorithms. The matrices X acting on Q are replaced by 
a single unitary matrix Q acting on I ® Q by "reading the input out of I in the standard 
basis" and, conditional on reading input X, doing the unitary X on the register Q. That 
is, in the tensor product basis |X)|z), Q acts via: 

n\X)\i) = \X)X\i) . (3) 

Thus the matrix Q written in this basis, with Q's basis the fast-running index, is block- 
diagonal, with the unitaries X as the diagonal blocks. 

We can view the first t steps of an algorithm as acting on such a computer (starting in 
an initial state \^f I( ^ w )) to produce a state \ty (t)) defined as follows: 

Definition 5 

\y I( > w (t)) := (J'®^)^^^ . 

(4) 
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Here we have introduced superscripts on unitaries to indicate which systems they act on, 
and superscripts inside kets to indicate the systems they belong to. These are not always 
used, however; sometimes we let the context make it clear what an operator acts on. Notice 
that the queries Q do not touch the workspace (and only touch the input register to read 
it in the standard basis), while the inter-query unitaries may arbitrarily entangle Q and W, 
but do not touch the "notional" input register I. 

As we will see in the proof of the main theorem, some of the variables in the semidefinite 
program we will now define, and which appears in our first main theorem characterizing 
query complexity, can be interpreted as the density matrices of the subsystems / <g> Q or / of 
such an extended query computer whose query and work registers are started in |0)|0), and 
whose input register is started in an unnormalized equal superposition of inputs (so that 
\^ IQW } = Exes\X}\0}\0}). 



IV. SDP CHARACTERIZATION OF QUANTUM QUERY COMPLEXITY: PRI- 
MAL FORMULATION 

Definition 6 (Semidefmite program P(g, q, e)) By P(g,q,e) we mean the following 
semidefinite program feasibility problem: Find \S\n x \S\n positive semidefinite Hermitian 
matrices p I( ^(t), t G {0,...,q — 1}, an \S\ x 15*1 PSD Hermitian matrix p T {q) and \S\ x \S\ 
PSD matrices T z , for all z G T ', satisfying the constraints: 

tr Q/ / Q (0) = E (5) 
ti Q p IQ (t)=ti Q Qp IQ (t-l)Q^ (6) 

for t G {0, q — 1}, where E is the constant all-ones matrix), 

p I (q)=tT Q n P I Q(q-l)n^ (7) 

A z *r, h (l-e)A z , (9) 

where the constant diagonal matrix A z is defined by A Z (X,X) = 1 if g(X) = z, else 0. * 
denotes the elementwise (aka Schur or Hadamard) product of matrices. 

Using this, we state the following theorem, which is the first main result of the paper: 
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Theorem 1 A q-query, e-error quantum algorithm to compute g : S —> T exists if and only 
if a feasible solution to P(g, q, e) does. Furthermore, for each particular feasible solution 
({p I( ^(t)} t , p 1 (q), {T z } zeT ^ there is a (q,e)-QQA that computes g, for which the dimension 
r of the working memory is no larger than the greater of of \S\N and \^2 zeT rank(Tz)/N~\ . 
Since the latter is no greater than \\S\\T\/N] , it follows that any (q,e)-QQA computing 
g may be implemented with workspace dimension no greater than max\S\N, \\S\\T\/N] in 
addition to the N -dimensional query register. 

In terms of qubits, then, the algorithm needs no more than 
max { [log \S | ] + [log AT], [logS 1 ] + [log|T|}] — [logiVj qubits of workspace in addition to 
the [log iV~|-qubit query register. 

Proof: We prove first the implication from the existence of a (q, e)-QQA solving the problem 
to the existence of a feasible solution to P(g, q, e), establishing it by constructing the latter 
from the former. We do this by defining matrices p I( ^(t), T z in terms of the objects of the 
QQA, and showing that they satisfy the constraints ([5H9]) on the variables of the same names 
in the definition of P(g, q, e). 

We begin by showing that in order to tell whether an algorithm will succeed in e- 
computing the function g no matter what the input, all we need to know is whether the 
geometry (the inner products) of the final computer states \§x W (q)) allows these states to, 
roughly (i.e. up to e), lie in a set of orthogonal subspaces such that the vectors |3>x') m 
each subspace share the same value of g(X). (They may have to be iso metrically embedded 
in a larger space to do this.) Formally, this gives an SDP which we now construct. We array 
the inner products in a matrix G(q) defined 

Definition 7 M(q)[X,Y) := ($® W (q)\$® W (q)) . 

For later use, similar matrices G(t) may be defined for all t between and q inclusive, using 
the conditional computer states \^/ I( ^ w (t)) after the t-th query and post-query unitary. 
The t = case, before any query, is of course the all-ones matrix. Because these are 
matrices of inner products (sometimes called "Gram matrices"), they are necessarily positive 
semidefinite. The condition that the geometry of the final inner products is correct may be 
stated as a semidefinite programming feasibility problem with a constraint involving G(q): 
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Definition 8 (SDP 0(g, e, M)) For a problem g, real number e between zero and one, and 
\S\ x \S\ positive semidefinite matrix M, the program 0(g,e,M) is the following: Find 
\S\ x \S\ PSD matrices {T z } zeT such that 

J2 r * = G ( 10 ) 

A,*r z y {l-e)A z . (11) 
The proof of the following lemma essentially repeats part of the proof of the main theorem 




Lemma 1 The SDP 0(g,e,G(q)), where G(q) is defined as in Definition^ above to be the 
final-state inner-products matrix of a QQA for g, is feasible if the QQA e-computes g. 

Proof of lemma: The feasible solution is obtained by defining T z as the matrices with 
components: 

r,[X,Y]:={*fr(q)\P,\*$ w (q)). (12) 

Satisfaction of the constraint (fTUl) follows because ^2 P z = I, while (fTTj) is guaranteed by 
Eq. (E} in Definition [3 ■ 

The definition of T z just given is also the one will use to show feasibility of P(q, e). 

Lemma [T] has a suitable converse (see below). Thus to decide, from the final inner- 
products matrix G(q), whether the value of g has been e-computed or not, is a question of 
semidefinite program feasibility However, essentially because the action of the queries is not 
linear on the matrices G(t) that we defined based on the QQA (the inner-product matrices 
of the input-conditioned states after query t), we cannot formulate linear constraints on 
variables corresponding to G(t) that enforce the condition that the final inner-products 
matrix must arise from the initial one via queries and pre- and post-query unitaries. We 
need different, though related, quantities to fomulate that condition as a linear constraint. 

These quantities are most easily and intuitively described by going to the "explicit inputs" 
formulation described above, with overall state space IQW including the "virtual input 
register" / started in an unnormalized uniform superposition of inputs. It is easily seen, 
using the definitions of ft, \V x W (t)), and \^ IQW (t)), that 

\9'Q"{t)) = Y l \X I )\*T r (t))- (13) 

xes 
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We define p IQW (t) := \^ IQW (t))(^ IQW (t) |, and density matrices such as p IQ (t) := 
tr wP I( ^ W {t), etc.... It is then easily seen by direct calculation that 

{X\fS(t)\Y) = (* x (t)\*Y(t))> (14) 

and consequently that the matrix of p 7 (t) in the standard basis that labels inputs, is just the 
Gram matrix G(t) of Definition [71 We will generally identify operators with their matrices 
in the standard tensor product basis for IQW, and hence if the QQA e-computes g, the 
program 0(g,£, p 1 (q)) with p 7 (g) := tr Q[p IQ (q)} in place of M, is feasible. Moreover, the 
quantities p I( ^(t) are exactly those necessary to formulate the computational constraints 
linearly, as we now show. 

Since in our analysis we will at times consider separately the effects of the query and of 
the post-query unitary, we also define \<S> x W (t+)} := (X Q ® I W )\<S>® W (t)} , \§ IQW (t+)} := 
(Q IQ <g> I w )\<5> IQW {t)), and p IQ {t+) as the "density" matrix tr w [\V IQW (t+))(V IQW (t+)\] ; 
these are the vectors and density matrix after the t-th query but before the £-th post-query 
unitary. Since the post-query unitary U® w (t) does not touch /, p 1 (t) = p 7 ((t — 1)+), or in 
other words: 

tr Q p^(t)=tr Q p^((t-l)+). (15) 
Since the query is just the implementation of the unitary Q on IQ, we have: 

P IQ ((t-i)+) = n P IQ (t-i)rt . (16) 

Eliminating the unnecessary quantities p I( ^((t — 1)+), we can combine the two preceding 
sets of equations into a single set (indexed by t) of linear equations: 

ti Q p IQ (t) = ti Q np I( ^(t-i)Ql (17) 

In other words, the quantities p I( ^{t) satisfy the constraints §6§. It is also clear that p 7< ^(0) 
as defined from the algorithm satisfies ([3D, because U® w (0) does not touch J, and \^ I( ^ W ) 
has the all-ones matrix as its reduced density matrix. Furthermore, since as stated in Eq. 
(j!4p . G(t) = p 7 (t) and the latter is just tr gp /( ^(t), we have from Lemma [T] and its proof 
that T z as defined in that proof satisfy the constraints ([H]) and Thus we have shown the 
first direction of the theorem (existence of a QQA implies feasible solution to the SDP). 

It remains to show the other direction, that the existence of a feasible solution for P(g, q, e) 
implies that of an e-QQA solving the problem with the stated amount of workspace. Again 
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it is a straightforward construction, though we must keep track of the amount of workspace 
used in the algorithm we construct. In this part of the proof p I( ^(t), T z will be taken to 
be the feasible values of the variables of the same names in Definition EJ it will turn out, 
of course, that when we have constructed the desired QQA, they will coincide with the 
quantities of the same names, p I( ^(t), T z , obtainable from that QQA via the definitions in 
the first part of our proof. 

The construction begins with a converse of Lemma [TJ 

Lemma 2 If the SDP 0(g, e, M), has feasible solution {r z } 2g T there exists a set of vectors 
{\^x)}xeT in a Hilbert space of dimension no greater than Y2 z eT ran ^(^z) < l^ll^l an d 
projectors P z acting on that space such that M is the Gram matrix of {\^ x)}x&t and P z 
satisfy Eqs. (TUP and (TJ|). 



Sketch of proof of Lemma[2t The proof (with notational differences) may be found in [131 ] ; 
it proceeds by constructing vectors \Qx) of length \S\ and a "POVM" consisting of \S\ x IS*! 
PSD matrices {R z } z( zt such that Yl zeT R z = I and (®x\R-z\®x) > £, an d then Naimark- 
extending the POVM to a set of projectors P z in a larger space and identifying \^x) as the 
corresponding embeddings of the vectors \Q X ) in the larger space. This ensures that \^x) 
satisfy ([2]). The minimal dimension required for the Naimark extension is XLgt rank(Y z ). 

■ 

Since Eqs. ([8]) and ([9]) just state that 0(q,e,M) with tr Qp IQ (q) substituted for M 
is satisfied, Lemma [2] gives us vectors {|\I/x(<7))}xeT in a Hilbert space H of dimension 
| if | := ^2 ze T rank(r z ) whose Gram matrix is tr Q{p I( ^{q)) and projectors P z on that space, 
which together satisfy Eqs. ( fT2l) and (j2J). We may give H the structure Q <S> W with Q 
| S | -dimensional and the dimension of W large enough to guarantee that dim(Q ® W) > 
J2 zeT rank(T z ); \W\ = \\H\/\N\] < \\3\\T\/\N\] suffices. Given the vectors \V x (q)) E 
Q (g) W, we can construct the state \^ IQW ) ■= \ xI )\^x W ( ( l))- % construction, this 
state's reduced density matrix for system I will equal the feasible p I {q)- 

Now suppose we have \ty ® (t)) such that its reduced density matrix coincides with the 
feasible value p I( ^(t) (or, for the case t — q, some arbitrary p T ®{t) whose I density matrix 
coincides with the feasible p\q)). We construct U QW such that \^ IQW (t - 1)) := (fi /Qt <g> 
i w/ )(i / ®f/ QW/t )|^ /Qiy (t)), has IQ reduced density matrix equal to p IQ (t-l) (or, for the case 
t = 1, to the all-ones matrix). To do this, first note that any purification of ttp ®(t— l)fi' into 
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W (and there exist many so long as \W\ > \I\\Q\) is also a purification of p 1 (t) := tiQp I( ^(t) 
into QW, by the constraint ([6]). Moreover, by acting via a unitary JJ® W ^ on \^/ I( ^ w (t)) , we 
can reach such a purification of p T (t) that is also a purification of Qp I( ^(t — as long 

as W has dimension at least \S\N. We let a [/^ w that achieves this be the t-ih unitary, 
U QW {t) of our algorithm, and define \V IQW {t - 1)) := (Q IQ ^ <g> J iy )(/ / <g> C/^t^QW^)}. 
Thus, tr Q |* /Q ^(t - - 1)| = p IQ (t - 1), as claimed. 

We apply this step beginning with the states \ 1 ^> 1< ^ w (q)) already constructed, until we get 
state \^f I( ^ w (0)) which by construction will have the all-ones matrix as its reduced density 
matrix, and thus \^ IQW (0)} = J2x \ x )\x QW ), where WLOG we can choose U QW (0) so that 
U QW \0)\x QW ) = |0). Thus the sequence U QW (0), U QW (q), and the indexed set {P z } zeT 
we have constructed are a quantum algorithm that e-computes g, and the dimension of W 
satisfies the claimed bound, which derives from the bounds on \Q ® W\ of Yl z rank(T z ) 
(from the Naimark extension at the output) and \S\N (from the workspace needed to reach 
an arbitrary purification of a fixed p 1 ® in the post-query unitary step). ■ 
Remark: For those who like the matrix picture, thinking of the matrix G(t) of p I( ^(t) in 
the standard basis blocked according to X and Y, we see that during the query each block 
is updated according to a fixed block- dependent linear map: 



This is just conjugation by the block-diagonal unitary matrix whose (X, X) block is X (i.e., 
the matrix of Q). 

Using this we can express the constraints ([6]) in terms of the matrix M viewed as blocked 
according to X,Y. Each of the q constraints on the matrices p I( ^(t) (which states that an 
\S\ x \S\ matrix calculated from p IQ , namely its partial trace p 1 , is equal to another such 
matrix), becomes 1 lll 2 — - constraints each stating that the trace of an (X, Y) block of some 
matrix is equal to that of another: 



or, in the case t — q, a similar set of constraints with no trace on the LHS. This is because 
the matrix of the partial trace in question is the matrix of traces of the blocks; since the 
block matrix is Hermitian, only |S'|(|S'| + l)/2 blocks, say those on and above the main 
diagonal of blocks, are independent. Equivalently, 



(18) 



tr [G {x ' Y \t)} = tr [YG (x ' Y \t - l+)X f ] , 



(19) 



tr [G {x ' Y \t)} = tr [X^YG ix ' ¥) (t - 1+)] . 



(20) 
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V. THE DUAL SDP 

In order to find the SDP feasibility problem dual to the one just given, we begin by 
stating a very general theorem concerning feasibility of conic program constraint sets. 

Theorem 2 Let K be a closed, pointed, generating convex cone in an m- dimensional real 
vector space V , with a distinguished inner product (-, ■). Let W be a p- dimensional real vector 
space, also equipped with a distinguished inner product (written similarly). Let K* C V be 
the cone dual to K according V 's inner product. Let A be a fixed linear transformation from 
V to W whose kernel is {0}, and let b G W be a constant nonzero vector. Let A* : W — > V 
be the linear map "dual" or "adjoint" to A, defined by (w, Av ) = (A*w,v). (For example, 
if V and W are viewed as spaces of column vectors of lengths m and p respectively equipped 
with the inner products (u, v) = u l v, and A is represented by its p x m matrix A, then A* 's 
matrix is A 1 .) 

Consider the conic programming feasible set defined by: 

p ■= { x e V : Ax = b, x > K 0} , (21) 
This set is empty (the constraints are "infeasible" ) if and only if the dual feasible set 

D:={yeW: A*y > K « 0, (6, y) < 0} (22) 
is nonempty (the dual constraints are "feasible"). 

Proof: First let x belong to P. Suppose that A*y G K*, so y satisfies the first condition 
defining D. We show that (b, y) > 0, so that y ^ D. A*y G K* implies (since x G K) that 
(x, A*y) > 0. Thus (Ax, y) > 0; since x G P, Ax = b, so (6, y) > 0. 

Next, suppposing P infeasible we construct a point in D. Consider the A-image of K, 
denoted AK. By the assumption that A's kernel is {0}, and for example Theorem 9.1 of 
[jjj], AK is a closed convex cone. Now, b ^ AK, for if it were, its preimage would belong 
to P, contradicting the supposition. Therefore, by (for example) Theorems 11.1, 11.3, and 
11.7 of jljJl, there exists a hyperplane through the origin properly separating b and AK; 
this hyperplane is the zero-set of a linear functional L(x) := (y,x) determined by a vector 
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.1 in Q 



y eW. Thus (cf. the proof of Thm. 11.1 in [14() (b,y) < 0, and for all z G AK, (z,y) > 0. 
The latter is equivalent to: for all x G K, (Ax, y) = (x, A*y) > 0. Thus y G D. ■ 
Lemma 2 of JjJ was a special case of this, for a particular cone K and a particular 
form of the linear map A. In [3| we then further specialized the Lemma to the case in 
which the primal feasible set P was the SDP characterizing the existence of a quantum 
query algorithm for classical Boolean queries. We now proceed by giving a generalization of 



Lemma 2 of |l3j which is still a special case of the above theorem, but which is sufficiently 
general to encompass the SDP characterizing quantum query complexity with arbitrary 
queries. 

Lemma 3 Let K C W be the product of k cones of PSD Hermitian matrices (with the r-th 
cone a cone of d r x d r matrices), in the obvious W (direct sum of the spaces of d r x d r 
Hermitian matrices). Let V be the direct sum of k copies of H(s) for some fixed s. Let 
A be a fixed k x k matrix whose entries are linear maps A a ,/3 '■ H{dp) i— > H(s). Let B be 
a nonzero element of V , i.e. a k-tuple of matrices Bp, with Bp G H(s). Equip V and W 
with the trace inner products, (A,B) := tr AB. (Matrices in V and W are block-diagonal, 
k blocks by k blocks.) Consider the "primal" feasible set: 

P:={XeW:J2 A a p{X p ) = B a , X G K} , (23) 

ft 

and the "dual" feasible set 

D:={YEV: J^ A U Y p) » E tr ^ < °> ■ ( 24 ) 

Suppose further that the only feasible solution to P (the primal problem with B a set equal 
to zero) is G W . Then if D is feasible, P is infeasible, and vice versa. 

We caution the reader not to confuse the variable matrices X a , Y@ appearing in the SDP 
above with the variables X and Y that we commonly let range over input unitaries in S. 
We will rarely use these notations together, and only when it is clear from the context what 
is meant, and in any case we never use subscripts on the input unitaries, nor do we ever 
omit subscripts from the primal and dual variables of the above type of program. 
Remark: Note that A* is the linear map often called by quantum information theorists A\ 
defined by tr FA\G) = tr A(F)G (for all F in the input space and G in the output space, 



1(3 



though it suffices to require it for bases of these spaces given linearity). In the case where A 
is completely positive, i.e. A : G > ^ 4 A^G-A], A^ may be defined via 

■ 

The program P(g,e,q) is a case of P, for which W is the direct sum of q copies of 
H(\S\n) and 2\T\ + 1 copies of H(\S\), and V is the direct sum of q + 2 + \T\ copies of 
H(\S\). In terms of the associated query algorithm, the q copies of H(\S\n) in W are 
where the density matrices p I( ^{t) will live, one of the copies of H(\S\) is for p T (q) and 
the other 2\T\ copies of H(\S\) are for the the output conditions: \T\ of them, indexed by 
z G T, for an additive decomposition of the final p 1 into positive matrices T z representing 
the portion of the output matrix for which the final measurement has result z, and \T\ 
more for slack variable matrices Il 2 , used to transform the inequality conditions on the 
T z , for succesful computation, into equality conditions. These inequality conditions are are 
A Z *T Z y (1— e)T z ; requiring the slack variables U z to be positive while enforcing the equality 
constraint A z * T z — U z = (1 — e)A z is equivalent to imposing the inequality constraint on 
the T z . Thus the vector of primal variables Xp is indexed as follows: for < (3 < q — 1, 
Xp = for/3 = q, X p = f/(q); for = q + z(z G T = {1, \T\}), Xp = T z ; for 

P = q+l + \T\ + z(zeT = {l, \T\}),Xp = U z . 

We now specify the maps A a) p and constant vector B = [B a ]. We will give rows of 
the matrix A a> p, followed by the corresponding RHS constant B a , since each row and B a 
corresponds to a constraint; the constraints will be naturally grouped by type. 

For < a < q — 1, A a , a is the partial trace map G 1 ® i— > tr q(G I( ^), and (for 1 < a < q) 
A a -i, a '■ G 1 ® i — ► — tr q(G I( ^), with the rest of the maps zero for a, j3 in this range. The 
corresponding RHS constants are B = E (where E is the all-ones matrix in H(\S\)), and 
B a = (1 < a < q)\ thus far we have imposed all the trace constraints on query-updating 
(constraints 0, ...,q — 1 give the effect of the pre-query unitary and query, while constraint 
q gives the effect of the unitary following the last query). A q+ i iq is minus the identity 
map, while A q +i iq + z , for z G \T\, is the identity map id : X \— > X (and the other maps 
A q +i^x are zero). The corresponding RHS constants are zero: this imposes the constraint 
that the T z are an additive decomposition of p ! (q) into positive matrices. Finally, for 
a = q+ l + z,zE \T\, A aA+z : X i— > A z * X, A aA+ \ +z+ \T\ = —id, and the rest of them are 
zero. And the corresponding RHS constants, B a : a = q + l + z,z£T, are zero matrices. 
These just impose the output conditions, in the equality- constraint form with slack variables 
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given above. 

To make this clearer, we display in Appendix B the constraints in the form Ax = b, 
where A is the matrix of maps A a p, x and b are column vectors of matrices X a , Bp; we 
also display there the dual matrix-multiplication part of the dual constraints. Appendix B 
serves as a useful aid to verifying that the procedure about to be described for deriving the 
dual of P(g, e, q) is carried out correctly, and that problem D(g,e, q) below is the result. 

The dual feasible set is obtained, using Theorem 2, by transposing the matrix of maps, 
and replacing each map with its dual. When A : I®Q — > / is the partial trace map, its dual 
A* : / — > I <8> Q is given by A* : L i— > L (g) / (where, to clear up ambiguous notation, I in this 
last specification refers to the identity matrix on the system Q, not to the system / itself as 
it does in the preceding two). For A : G i— ► tr q(QGQ^), we have A* : L i— > fi'(L <g> I)Q. 
Remark: We can give more explicit forms of these maps (and incorporate the special form 
of Q, in the second case). Viewing elements of J® Q as block matrices blocked according to 
X,Y G S, and elements of / as matrices with elements indexed by pairs X, Y G S, we have, 
when A is the partial trace map, that A* takes M to the matrix whose blocks are MxyI- 
For A* : G i— > Q^(M <S> the output matrix is the one whose blocks are MxyY^X. Id is 
of course dual to itself, and so, as is easily verified, are the maps M i— ► A z * M. ■ 

We thus obtain a version of the dual program D(g,e,q). The dual variables are q+ 1 + |T| 
\S\ x \S\ Hermitian matrices Yp whose matrix elements are indexed by input-pairs (X, Y) G 
S x S. The first q, corresponding to the primal query updating constraints, we call L t , 
(t G {0, ...q — 1}); the next, corresponding to the primal constraint that the T z add up to 
p J (g), we call L q ; and the last \T\, each corresponding to the output constraint on a primal 
variable T z , we call A z (z G T). We must find such matrices satisfying the constraints: 



Redefining the A z to be the negatives of the A z above, so as to have them be PSD, 
changing some signs, and dropping the redundant variable L q+1 , we formally define the dual 



L (t _i) (g> I - tt\L t <g> i)n y (1 < t < q) 



(25) 
(26) 
(27) 
(28) 
(29) 



L q — L q+ \ 



y-A z *A z+1 , (1<*<|T|) 
-A z ^0 (1 < z < \T\) 
( l o)x,y + (1 - e)tr ^ A, * A z < . 
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program: 



Definition 9 The semidefinite program (feasibility problem) D(g, e, q) is defined as the prob- 
lem of finding q+1 \S\ x \S\ Hermitian matrices L q , q G {0, ...q] and \T\ \S\ x | jS* | Hermitian 
matrices A z for z e T, with matrix elements indexed by S x S, such that: 

L(t-\)® I >zrf(L t ® (l<t<q) (30) 

L q hA z *A z , (l<z<|T|) (31) 

A,h0 (1 < z < \T\) (32) 

E ( L ^,y < (1 - e) E (^z)x,x ■ (33) 

X.Y&S z&T X:g(X)=z 

Comparison to the program P(f, t, e) of Theorem 2 in [l^] shows that they are identical 
except for the first constraint (the query-updating one), and that when Q has the special 
form corresponding to classical phase queries to input strings x (when x is in the input 
register), then D above specializes to P of [l^ |. 

Note that the constraint fl30l) says that the block matrix whose X, Y block is the N x N 
matrix L t [X, Y]X*Y — L t ~ 1 [X, Y]I is positive semidefinite. 

An immediate consequence of Theorem [1] and El is the following Theorem. 

Theorem 3 With S , T as above, a q-query, e- error quantum algorithm to compute g : S —> 
T exists if and only if a feasible solution to D(g, q, e) does not. 

VI. RELAXATION, DUALITY, AND A GENERALIZED SPECTRAL ADVER- 
SARY METHOD 

A. Relaxation to the pairwise output condition: primal and dual programs 

We now consider relaxing the primal program by substituting the weaker output condition 
of "pairwise near-orthogonality," also known as the "Ambainis condition" fis| : 

\p\q)[X,Y}\ < 2^1(^7) when g(X) ^ g(Y) . (34) 

We call it "pairwise near-orthogonality" because, by ( fl4l) . when p I( ^(q) is viewed as the 
unnormalized density matrix of the input register in the explicit-inputs model, \p I( ^{q) [X, Y] | 
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is the modulus of the inner product of the QW computer states conditional on inputs X 
and Y in the "black-box" model, so it states that these conditional states are nearly (for 
small e) orthogonal if X and Y have different values of g; a necessary, but not sufficient, 
condition for them to be the final states in a successful computation of g. 

In order to formulate this as a semi definite constraint, we need constant matrices V XY G 
Md^l), for all unordered pairs (X, Y) of X, Y G S such that g(X) ^ g{Y) (we call this set 
R for future reference). For each such pair we define V XY to be the matrix whose X, Y and 
Y,X matrix elements are 1, and whose other matrix elements are all zero. We also need 
the constant matrices W XY for the same unordered input-pairs, but whose X, X and Y, Y 
matrix elements are 1 (and whose others are zero). Then the Ambainis output condition is 
equivalent to the conditions: 

V XY * /(g) + 2y/e(l - e)W XY h (35) 

where (X, Y) G R. We won't need the output variables T z in this case, but we will need a 
slack variable U XY >z for each of the \R\ unordered pairs, to get equality constraints 

V xy # p i {q) + 2y^r^7)W XY = U XY . (36) 

Thus the dual program is to find \S\ x \S\ Hermitian matrices L*, < t, < q and Txy, 
X,Y G S, such that: 

L t -i ®Ih n(L t ® /)fi f (1 < t < q) (37) 
L g h J2 (V XY *Txy) (38) 

(X,Y)£R 

T XjY yo(x,Y)eR) (39) 

^ L [X,Y]<-2y^il^T) tr(T XY W XY ), (40) 

X,Y&S (X,Y)&R 

and (T xy ) M7V = unless MN G {XX, XY, YX, YY}. 

Rewriting this in terms of the variables K t := —L q _ t we formally define the dual program 
D A . 

Definition 10 

K ±- ( vXY * T xy) (41) 

(X,Y)eR 
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K t _ x ® I ■< n(K t (l<t<q) (42) 
T x>Y hO((X,Y)eR) (43) 
K q [X,Y}> 2^1(1^7) trT ^ (44) 

X.YtS {X,Y)eR 

and (T X y)mn = unless MN e {XX, XF, FX, FF}. 



B. A generalized spectral adversary method 

We next obtain, from this dual program, a generalization of Theorem 4 of [3], giving 
a lower bound directly on the number of queries in an algorithm e-computing a function, 
in terms of relatively easily computed properties of the function and a "weight matrix" T 
that we are free to choose. This gives a generalization of the so-called "spectral adversary 
method" for quantum query complexity lower bounds. We use the notation A(M) for the 
largest eigenvalue of a matrix M. 

Theorem 4 Let S be a finite set of unitary \S\ x \S\ matrices, and let g : S i— ► T ', T a 
finite set. Let V be a nonnegative real symmetric \S\ x \S\ matrix indexed by S, such that 
= whenever g{X) = g(Y). Then 

ooc (a) > (i-V^O^Mr) m 

Proof: To prove this, we construct, for any V as above and q below the bound given in 
the theorem, a sequence K t : < t < q, Txy, {X, F} G R that is a feasible solution to 

DA(g,q,e)- 



Note that by the standard Perron- Frobenius theory of nonnegative matrices [16|, T has a 
normalized eigenvector v with nonnegative entries, whose eigenvalue is T's largest, i.e. A(T). 
We define K t := (T - tal) * vv\ where a := 2A(r ® I - Vt{T <g> J)nt). We also define T X y 
via 

T xy [X,X] = T xy [F,F] = -T XY [X,Y] = -T xy [F,X] : = 

K [X,Y]=T[X,Y]v[X]v[Y] , (46) 

with its other matrix elements zero. These are manifestly positive semidefmite, satsfying 
£3]) . That (|4ip is satisfied with equality is also immediate from the definitions. 
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To verify that (1421) is satisfied, we have a look at 

n(K t ® 7)fi f - K t -i ® 7 = fi((r - to/) * tw*) ® 7)fi f - ((r - (t - 1)«7) * to') <g> 7 (47) 

= (w* <8> E) * Q(r - ta7) <g> 7)fi f - (w* <g> E) * ((r - (t - l)al) <g> 7) (48) 

= (w* <g> £) * [fi(r <g> 7)fi f - to(7 ®I)-T®I+(t- l)a(7 <g> 7)] (49) 

= (vv t ®E)*[n(T(g)I)& -T®I -a(I®I)] . (50) 

Note that in the second equality we used the identity 

Z\X*M®I)Z= (M®E)*Z ] (X®I)Z , (51) 

which does not hold for general Z, but does hold when (as in the cases Z = Q, Z = I that 
we use) Z is block-diagonal when the blocks are indexed by a basis for the input register 
(the register that we write on the left in tensor products). The matrix in ( 1501) is positive 
semi definite by the definition of a, so the constraint (1421) is indeed satisfied. Finally, the 
constraint (jUJ) is satisfied because 

trT xy = 2T[X,Y}v[X}v[Y]=v t Tv = \(T), (52) 

(X,Y)£R (X,Y)eR 

while J2xy Kq[X, Y] = X(F) — qa, which by our assumption on q is greater than or equal to 
It is easily seen that this Theorem specializes to Theorem 4 of [13j |. 
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APPENDIX A: THE MATRIX MULTIPLICATIONS APPEARING IN THE PRI- 
MAL AND DUAL CONSTRAINTS 

In this section we use the notation trQ to denote the partial trace map from 7 ® Q 
to 7, Q to denote the map G i— > QGQ^, to denote the map G i— > Af. * G (where * 
is the elementwise matrix product); juxtaposition of maps to indicate composition (thus 
trQ$7 : G i— > tr q(QGQ^), and the superscript * to indicate the dual map. We also use 
the facts that the maps are self-dual and that the dual Q* of the map Q is the map 
fit : M ^ 9)MVL. 



22 



1. Unrelaxed constraints 



With this notation, the matrix multiplication portion of the primal constraints is: 



/ 
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The matrix multiplication part of the dual constraints is: 
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2. Relaxed constraints (pairwise output condition) 



Primal matrix multiplication constraints: 



V 



trq 
— trqf2 trq 

-trqfi tr Q 
-trqfi 


id 


> 




—Vx lt Yi* 


id 

id 

id 



nxi,Yi 



id / L n ^i«h%i. 
From the above we get the dual matrix multiplication constraints 



p IQ (0) 
P IQ (1) 

p IQ {q) 



tr Q * -Qt t r Q * 

tr Q * -nHr Q * 








trq* 








id 


—Vx X) Yi* ' ' 


■ -Vx| H |,yj H |* 
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2^(1 - e)W Xl ,Y 1 
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